diff --git a/docs/img/nextcloud/dashboard.png b/docs/img/nextcloud/dashboard.png new file mode 100644 index 0000000..42afb08 Binary files /dev/null and b/docs/img/nextcloud/dashboard.png differ diff --git a/docs/img/nextcloud/login.png b/docs/img/nextcloud/login.png new file mode 100644 index 0000000..aa4b83f Binary files /dev/null and b/docs/img/nextcloud/login.png differ diff --git a/docs/install.md b/docs/install.md index e1bff97..8ff1ec5 100644 --- a/docs/install.md +++ b/docs/install.md @@ -181,3 +181,15 @@ You can now connect by SSH to your Helios4 to carry on with your configuration. ## **What to do next ?** If you want to install OpenMediaVault, the next-gen network attached storage (NAS) software, refer to the [OMV](/omv) page. + +For other software you can also use **armbian-config** which provides a collection of 3rd party application auto installers. + +```bash +sudo armbian-config +``` + +![!armbian-config Main Menu](/img/omv/install-1.png) + +![!armbian-config Software](/img/omv/install-2.png) + +![!armbian-config Selection](/img/omv/install-3.png) diff --git a/docs/mdadm.md b/docs/mdadm.md index c7f2edf..d319659 100644 --- a/docs/mdadm.md +++ b/docs/mdadm.md @@ -175,7 +175,7 @@ Add the new filesystem mount options to the /etc/fstab file for automatic mounti echo '/dev/md0 /mnt/md0 ext4 defaults,nofail,discard 0 0' | sudo tee -a /etc/fstab -**Your RAID array should now automatically be assembled and mounted each boot!** +**Your RAID array should now automatically be assembled and mounted at each boot!** ## Reset Existing RAID Devices diff --git a/docs/nextcloud.md b/docs/nextcloud.md new file mode 100644 index 0000000..571e9a7 --- /dev/null +++ b/docs/nextcloud.md @@ -0,0 +1,229 @@ +Nextcloud is an open-source software suite that allows users to store their data such as files, contacts, calendars, news feed, TODO lists and much more, on their personal servers. It is using standard protocols such as webdavm, carddav and caldav. It also provides client applications so users can easily manage and synchronize their data among Linux, MacOS, Windows platforms and smart phones, which makes Nextcloud a great free alternative to proprietary cloud services such as Dropbox, Google Drive, iCloud, etc… + +In this tutorial we will install and configure Nextcloud 13 on a Debian 9 Stretch. + +## Step 0 - Requirements + +* You should have Debian 9 Stretch running on your Helios4. Refer to [Install](/install) page for instructions. + +* You should have setup your storage. This guide will assume you have setup a RAID array mounted to **/mnt/md0**. Refer to [Mdadm](/mdadm) page for guideline on how to setup a RAID array. + +## Step 1 - Install Apache2 + +A web server is required to run Nextcloud, in this tutorial we will use Apache2. Run the following command to install Apache on your VPS + + sudo apt install apache2 + +## Step 2 - Install PHP + +You need to install PHP7 and the modules required by NextCloud. + + sudo apt-get install php7.0 libapache2-mod-php7.0 php7.0-common php7.0-gd php7.0-json php7.0-mysql php7.0-curl php7.0-mbstring php7.0-intl php7.0-mcrypt php7.0-imagick php7.0-xml php7.0-zip + +## Step 3 - Install and Configure MariaDB + +Next, we will install MariaDB. + + sudo apt-get install mariadb-server + +Then run the *mysql_secure_installation* post-installation script to harden the security of your MariaDB server. + + sudo mysql_secure_installation + +You can answer as follow: + + Set root password? [Y/n] N + Remove anonymous users? [Y/n] Y + Disallow root login remotely? [Y/n] Y + Remove test database and access to it? [Y/n] Y + Reload privilege tables now? [Y/n] Y + +Now, login to the MariaDB server as user root and create a new user and database for Nextcloud. + +```bash +sudo mysql -u root -p +``` + + MariaDB [(none)]> CREATE DATABASE nextcloud; + MariaDB [(none)]> GRANT ALL PRIVILEGES ON nextcloud.* TO 'nextcloud_user'@'localhost' IDENTIFIED BY 'PASSWORD'; + MariaDB [(none)]> FLUSH PRIVILEGES; + MariaDB [(none)]> exit; + +Don’t forget to replace *‘PASSWORD’* with an actual strong password. Combination of letters and numbers and minimum 10 characters long is recommended. + +## Step 4 - Download and install Nextcloud + +Go to Nextcloud’s official website and download Nextcloud 13 to your Helios4. Currently latest stable version is 13.0.5 + + wget https://download.nextcloud.com/server/releases/nextcloud-13.0.5.zip + +Extract the downloaded ZIP archive in a directory Apache will have access to, and change the ownership of the nextcloud directory to the web server user. + + sudo unzip nextcloud-13.0.5.zip -d /mnt/md0 + sudo chown -R www-data:www-data /mnt/md0/nextcloud/ + +Once all Nextcloud prerequisites are fulfilled, we can complete the installation through the command line. Change the current working directory + + cd /mnt/md0/nextcloud + +and execute the following command as the web server user: + + sudo -u www-data php occ maintenance:install --database "mysql" --database-name "nextcloud" --database-user "nextcloud_user" --database-pass "PASSWORD" --admin-user "admin" --admin-pass "PASSWORD" + +Use the database information we created above and set a strong password for the Nextcloud ‘admin’ user. + +If the installation is successful you will get the following output + + Nextcloud was successfully installed + +### Update Apache configuration + +In order to allow Apache to access the location where you installed Nextcloud you need to edit /etc/apache2/apach2.conf. + +```bash +sudo nano /etc/apache2/apache2.conf +``` + +Append the following at the bottom of the file: + + # Allow access to /mnt/md0/nextcloud + + Options Indexes FollowSymLinks + AllowOverride None + Require all granted + + + +### Create Apache Virtual Host + +!!! important + Here we are assuming you have your own domain name or your are using a Dynamic DNS service. We recommend [Dynu.com](https://wwww.dynu.com) service which provides free DDNS service. + + They also provide a guideline [here](https://www.dynu.com/DynamicDNS/IPUpdateClient/DDClient) on how to setup **ddclient** tool on Debian to automatically update your DDNS record. + +If you want to be able to access Nextcloud with a domain name, you will have to create a new virtual host. For this tutorial we use **mysubdomain.dynu.net** as an example, so don't forget to replace it with your domain name. + +Create the following file: + +```bash +sudo nano /etc/apache2/sites-available/mysubdomain.dynu.net.conf +``` + +Copy the following: + + + + DocumentRoot /mnt/md0/nextcloud + ServerName mysubdomain.dynu.net + + Alias /nextcloud “/mnt/md0/nextcloud/” + + + Options +FollowSymlinks + AllowOverride All + + + Dav off + + + SetEnv HOME /mnt/md0/nextcloud + SetEnv HTTP_HOME /mnt/md0/nextcloud + + + ErrorLog /var/log/apache2/nextcloud-error_log + CustomLog /var/log/apache2/nextcloud-access_log common + + + +Save the file and enable the newly created virtual host + + sudo a2ensite mysubdomain.dynu.net.conf + +To activate the new configuration, you need to reload Apache2 + + sudo systemctl reload apache2 + + +Edit the config/config.php file and add mysubdomain.dynu.net as a trusted domain + +```bash +sudo nano config/config.php +``` + + 'trusted_domains' => + array ( + 0 => 'localhost', + 1 => 'mysubdomain.dynu.net', + ), + + +With this step the Nextcloud 13 installation is completed. You can now visit http://mysubdomain.dynu.net and login to your Nextcloud instance using the credentials used in the installation command above. + +![NextCloud Login Page](/img/nextcloud/login.png) + +## Step 5 - Install and Configure Let's Encrypt (HTTPS) + +Finally it is a must to setup HTTPS for your nextcloud install. For that we will use **Let's Encrypt** certificate facility and the available tool **Certbot** to automatically install and configure your certificate. + +```bash +sudo apt-get install python-certbot-apache + +sudo certbot --authenticator webroot --installer apache +``` + +Just follow the wizard as shown below: + + Saving debug log to /var/log/letsencrypt/letsencrypt.log + + Which names would you like to activate HTTPS for? + ------------------------------------------------------------------------------- + 1: mysubdomain.dynu.net + ------------------------------------------------------------------------------- + Select the appropriate numbers separated by commas and/or spaces, or leave input + blank to select all options shown (Enter 'c' to cancel): + Enter email address (used for urgent renewal and security notices) (Enter 'c' to + cancel):me@mymail.com + + ------------------------------------------------------------------------------- + Please read the Terms of Service at + https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must + agree in order to register with the ACME server at + https://acme-v01.api.letsencrypt.org/directory + ------------------------------------------------------------------------------- + (A)gree/(C)ancel: A + Obtaining a new certificate + Performing the following challenges: + http-01 challenge for mysubdomain.dynu.net + + Select the webroot for mysubdomain.dynu.net: + ------------------------------------------------------------------------------- + 1: Enter a new webroot + ------------------------------------------------------------------------------- + Press 1 [enter] to confirm the selection (press 'c' to cancel): 1 + Input the webroot for mysubdomain.dynu.net: (Enter 'c' to cancel):/mnt/md0/nextcloud + Waiting for verification... + Cleaning up challenges + Generating key (2048 bits): /etc/letsencrypt/keys/0000_key-certbot.pem + Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem + Created an SSL vhost at /etc/apache2/sites-available/mysubdomain.dynu.net-le-ssl.conf + Enabled Apache socache_shmcb module + Enabled Apache ssl module + Deploying Certificate to VirtualHost /etc/apache2/sites-available/mysubdomain.dynu.net-le-ssl.conf + Enabling available site: /etc/apache2/sites-available/mysubdomain.dynu.net-le-ssl.conf + + Please choose whether HTTPS access is required or optional. + ------------------------------------------------------------------------------- + 1: Easy - Allow both HTTP and HTTPS access to these sites + 2: Secure - Make all requests redirect to secure HTTPS access + ------------------------------------------------------------------------------- + Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2 + Enabled Apache rewrite module + Redirecting vhost in /etc/apache2/sites-available/mysubdomain.dynu.net.conf to ssl vhost in /etc/apache2/sites-available/mysubdomain.dynu.net-le-ssl.conf + + ------------------------------------------------------------------------------- + Congratulations! You have successfully enabled https://mysubdomain.dynu.net + + +![!NextCloud Dashboard](/img/nextcloud/dashboard.png) + +*Tuto Source: [link1](https://www.rosehosting.com/blog/how-to-install-nextcloud-13-on-debian-9/) [link2](https://help.nextcloud.com/t/resolved-nextcloud-on-debian-jessie-access-forbidden/4083/3)* diff --git a/mkdocs.yml b/mkdocs.yml index c598e61..c0f0025 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -63,6 +63,7 @@ pages: - U-Boot : 'uboot.md' - Armbian : 'armbian.md' - Mdadm (RAID) : 'mdadm.md' + - NextCloud : 'nextcloud.md' - OpenMediaVault : 'omv.md' - Syncloud : 'syncloud.md' - FreeBSD : 'freebsd.md'